Privacy Policy

Last updated: June 10, 2026

TreatStreet ("TreatStreet," "we," "us," or "our") is operated by Hauler LLC. This Privacy Policy explains what information we collect through the TreatStreet mobile app and website (the "Service"), how we use it, and the choices you have. TreatStreet is a Halloween game designed to be safe for children and families.

Contents

1. Information we collect
2. How we use information
3. How we share information
4. Children's privacy
5. Location data
6. Content & AI processing
7. Your choices & rights
8. Data retention & deletion
9. Security
10. Changes & contact

1. Information we collect

We collect only what we need to run the game.

Account information

Username and password. Children create an account with a username and password (no email address required). For sign-in, an internal account identifier is generated automatically.
Sign-in with Apple / Google (adults). Adults may sign in with Apple or Google, which provides us a basic account identifier and, depending on your settings, an email address.
Parent email (for younger users). When a user indicates they are under 13, we collect a parent or guardian's email address to obtain verifiable parental consent (see Section 4).
Profile details. Display name, chosen costume avatar, school (optional), and age range/bucket.

Gameplay content

Photos and videos you take or upload (for example, photos of your candy haul).
Candy haul counts and scores derived from your photos.
Badges, points, leaderboard standing, and group/friend connections.
Map notes, house tags, comments, and reactions you post.

Location information

Approximate or precise location, only as described in Section 5 and only when permitted by your device settings and in-app toggles.

Device & usage information

Basic device and app information (such as app version and crash/diagnostic data) used to operate and improve the Service.

2. How we use information

To create and manage your account and profile.
To run core gameplay: scoring candy hauls, awarding badges and points, and building leaderboards.
To power social features you choose to use, like friends, groups, the neighborhood map, and reactions.
To screen content for safety and enforce our rules (see Section 6).
To obtain and manage verifiable parental consent for children under 13.
To respond to support requests and keep the Service secure and working.

We do not sell personal information, and we do not use children's personal information for behavioral advertising.

We share information only in limited ways:

With other users according to your privacy settings (Anonymous, Friends-Only, or Visible). What you post to the map, feed, or leaderboard may be visible to others in your age group as your settings allow.
With service providers who help us run the Service — for example, our backend/hosting provider, our parental-consent verification provider, and our AI content-moderation and candy-scoring providers. They process data on our behalf under contract.
With a linked parent or guardian who is connected to a child's account.
For legal reasons, if required by law or to protect the safety of users.
In a business transfer, if Hauler LLC is involved in a merger, acquisition, or sale of assets (subject to this policy).

4. Children's privacy

TreatStreet is intended to be used by children with appropriate protections. We comply with the U.S. Children's Online Privacy Protection Act (COPPA) and design the app to minimize data collection from children.

Verifiable parental consent

When a user indicates they are under 13, the account remains inactive until a verified parent or guardian provides consent through our consent provider. If consent is not completed, the child cannot use the Service. We collect the parent's email solely to facilitate this consent and related communications.

Data minimization for children

Children sign up with a username and password — no email address is required from the child.
For our youngest users, we do not collect location data from the child's device.
Sensitive settings are protected behind a parent-set PIN.
Children's accounts default to the most private settings.

Parent & guardian rights

If you are a parent or guardian, you may at any time:

Review the personal information we have collected from your child;
Request that we delete your child's personal information;
Refuse to allow further collection or use of your child's information; and
Unlink or close the child's account.

To exercise these rights, use the in-app controls or contact us at privacy@treatstreet.app. We may need to verify that you are the child's parent or guardian before acting.

5. Location data

We minimize location data and tier it by age:

Youngest users: we do not collect location from the child's device.
Sharing with friends is an opt-in feature controlled by a "Share Location" toggle that is off by default for kids. When it's off, we don't upload your location for friend-map sharing, and we delete any previously shared location.
Location is used to support gameplay features like the neighborhood map and candy-haul verification, and only as your device permissions and in-app toggles allow.

You can turn location permissions off at any time in your device settings.

6. Content & AI processing

Candy scoring. Photos of your candy haul are processed by an AI vision service to count candy and score your run.
Safety moderation. Photos and videos are automatically screened by AI before they appear, to detect inappropriate content. Users can also report or block content and other users; content with multiple reports may be hidden automatically.

We use these providers to process content on our behalf for these specific purposes.

7. Your choices & rights

Privacy settings. Choose Anonymous, Friends-Only, or Visible, and control location and search visibility in the app.
Access & deletion. You can delete your account and associated data in the app (see Delete Your Data) or by contacting us.
Regional rights. Depending on where you live (for example, the EU/UK or California), you may have additional rights to access, correct, delete, or port your data, and to object to or restrict certain processing. Contact us to exercise these rights.

8. Data retention & deletion

We keep personal information only as long as needed to provide the Service and for legitimate legal and safety purposes. When you delete your account, we remove your associated personal data from our systems. Note that deleted usernames are retired and cannot be reused. See Delete Your Data for how to start a deletion.

9. Security

We use reasonable technical and organizational measures to protect personal information, including secured backend storage and access controls. No system is perfectly secure, but we work to protect your data and respond promptly to issues.

10. Changes & contact

We may update this policy from time to time. If we make material changes, we will update the "Last updated" date and, where appropriate, provide additional notice. For privacy questions or to exercise your rights, contact:

Hauler LLC
Privacy: privacy@treatstreet.app
Support: support@treatstreet.app